AshOnetime.Signer.HMAC (ash_onetime v0.1.0)

Copy Markdown View Source

HMAC-SHA-256 signer restricted to explicitly same-service key material.

Raw bytes are never sufficient authorization for HMAC. Both signing and verification require %{key: key, trust: :same_service} from the resolver.